CVE-2004-0112: 4d webstar Out-of-bounds Read
CVSS: 5.0v2.0MediumModified
AliasesDEBIAN-CVE-2004-0112
Published 18-03-2004Last modified 08-08-2024
Some data may be incomplete
- 2 references with an unsupported link type were hidden.
Vulnerability summary
CVE-2004-0112 is a medium (CVSS 5.0) Out-of-bounds Read vulnerability in 4d webstar. EPSS estimates a 10.42% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
10.42%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 18-03-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
10.42%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 10.42% on 18-09-2026
18-09-202618-10-2026
EPSS score10.42%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Avaya10 products
- converged_communications_server2.0
- intuity_audix5.1.46 | s3210 | s3400
- s8300r2.0.0 | r2.0.1
- s8500r2.0.0 | r2.0.1
- s8700r2.0.0 | r2.0.1
Cisco10 products
- ciscoworks_common_management_foundation2.1
- ciscoworks_common_services2.2
- css_secure_content_accelerator1.0 | 2.0
- firewall_services_module1.1.2 | 1.1.3 | 1.1_\(3.005\) | 2.1_\(0.208\)
- ios12.1\(11\)e | 12.1\(11b\)e | 12.1\(11b\)e12 | 12.1\(11b\)e14 | 12.1\(13\)e9 | 12.1\(19\)e1 | 12.2\(14\)sy | 12.2\(14\)sy1 | 12.2sy | 12.2za
Redhat4 products
- enterprise_linux3.0
- enterprise_linux_desktop3.0
- linux7.2 | 7.3 | 8.0
- openssl0.9.6-15 | 0.9.6b-3 | 0.9.7a-2
Stonesoft4 products
- servercluster2.5 | 2.5.2
- stonebeat_fullcluster1_2.0 | 1_3.0 | 2.0 | 2.5 | 3.0
- stonebeat_securitycluster2.0 | 2.5
- stonebeat_webcluster2.0 | 2.5
Checkpoint3 products
- firewall-12.0 | next_generation_fp0 | next_generation_fp1 | next_generation_fp2
- provider-14.1 | 4.1:sp1 | 4.1:sp2 | 4.1:sp3 | 4.1:sp4
- vpn-1next_generation_fp0 | next_generation_fp1 | next_generation_fp2 | vsx_ng_with_application_intelligence
Hp3 products
- apache-based_web_server2.0.43.00 | 2.0.43.04
- hp-ux8.05 | 11.00 | 11.11 | 11.23
- wbema.01.05.08 | a.02.00.00 | a.02.00.01
Apple2 products
- mac_os_x10.3.3
- mac_os_x_server10.3.3
Novell2 products
- edirectory8.0 | 8.5 | 8.5.12a | 8.5.27 | 8.6.2 | 8.7 | 8.7.1 | 8.7.1:sp1
- imanager1.5 | 2.0
4d1 product
- webstar4.0 | 5.2 | 5.2.1 | 5.2.2 | 5.2.3 | 5.2.4 | 5.3 | 5.3.1
Bluecoat1 product
- cacheos_ca_sa4.1.10 | 4.1.12
Debian1 product
- openssl< 0.9.7d-1
Dell1 product
- bsafe_ssl-j3.0 | 3.0.1 | 3.1
Forcepoint1 product
- stonegate1.5.17 | 1.5.18 | 1.6.2 | 1.6.3 | 1.7 | 1.7.1 | 1.7.2 | 2.0.1 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7 | 2.0.8 | 2.0.9 | 2.1 | 2.2 | 2.2.1 | 2.2.4
Freebsd1 product
- freebsdEOL4.8 | 4.8:releng | 4.9 | 5.1 | 5.1:release | 5.1:releng | 5.2 | 5.2.1:release
Litespeedtech1 product
- litespeed_web_server1.0.1
Neoteris1 product
- instant_virtual_extranet3.0 | 3.1 | 3.2 | 3.3 | 3.3.1
Openbsd1 product
- openbsdEOL3.3 | 3.4
Openssl1 product
- openssl0.9.6c | 0.9.6d | 0.9.6e | 0.9.6f | 0.9.6g | 0.9.6h | 0.9.6i | 0.9.6j | 0.9.6k | 0.9.7 | 0.9.7:beta1 | 0.9.7:beta2 | 0.9.7:beta3 | 0.9.7a | 0.9.7b | 0.9.7c
Sco1 product
- openserver5.0.6 | 5.0.7
Securecomputing1 product
- sidewinder5.2 | 5.2.0.01 | 5.2.0.02 | 5.2.0.03 | 5.2.0.04 | 5.2.1 | 5.2.1.02
Sgi1 product
- propack2.3 | 2.4 | 3.0
Sun1 product
Symantec1 product
Tarantella1 product
- tarantella_enterprise3.20 | 3.30 | 3.40
Vmware1 product
- gsx_server2.0 | 2.0.1_build_2129 | 2.5.1 | 2.5.1_build_5336 | 3.0_build_7592
25 vendors · 55 products
References
28 links- www.securityfocus.com/bid/9899VDB EntryX Refsource BIDBroken LinkThird Party AdvisoryVendor Advisory
- marc.info?l=bugtraq&m=108403806509920&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
- www.mandriva.com/security/advisories?name=MDKSA-2004:023Vendor AdvisoryX Refsource MANDRAKEThird Party Advisory
- distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834Vendor AdvisoryX Refsource CONECTIVABroken Link
- sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524Vendor AdvisoryX Refsource SUNALERTBroken Link
- www.novell.com/linux/security/advisories/2004_07_openssl.htmlVendor AdvisoryX Refsource SUSEBroken Link
Show all 28 references
- www.ciac.org/ciac/bulletins/o-101.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIACBroken Link
- www.us-cert.gov/cas/techalerts/TA04-078A.htmlThird Party AdvisoryX Refsource CERTBroken LinkUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049VDB EntrySignatureX Refsource OVALBroken Link
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580VDB EntrySignatureX Refsource OVALBroken Link
- lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing List
- www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961Vendor AdvisoryX Refsource SLACKWAREBroken Link
- www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtmlVendor AdvisoryX Refsource CISCOBroken Link
- lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing List
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928VDB EntrySignatureX Refsource OVALBroken Link
